Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e37302e302f32342d3234203d3e20313436383137.roa
File:                     3130332e382e37302e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          qJc5MuWrgfm+/mg3vr5Bdm9BsWtMrkNoES8q2nSuVys=
Subject key identifier:   80:42:BC:53:77:F3:91:68:C6:26:84:DD:C3:2C:68:03:22:24:4B:04
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       0FA155F1B84A9D49DF52412A9EABACA0F1AEF811
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e37302e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:29 +0000
ROA not before:           Fri 08 May 2026 09:29:29 +0000
ROA not after:            Fri 07 May 2027 09:34:29 +0000
asID:                     146817
IP address blocks:        103.8.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a1:55:f1:b8:4a:9d:49:df:52:41:2a:9e:ab:ac:a0:f1:ae:f8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:29 2026 GMT
            Not After : May  7 09:34:29 2027 GMT
        Subject: CN=8042BC5377F39168C62684DDC32C680322244B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:65:34:19:47:05:e7:52:b7:1b:db:4b:53:
                    c1:f4:32:35:ba:3c:d1:f9:67:cb:e1:23:70:d0:17:
                    e4:75:a4:b2:7f:e1:ad:07:09:41:b3:d5:80:76:76:
                    e4:e2:84:a9:40:0c:ad:cc:00:59:f1:dd:a8:d7:d3:
                    72:79:88:2b:89:73:e8:9c:5f:ac:5a:5f:05:4f:01:
                    fa:b6:3b:3f:32:df:76:ce:6c:f9:a1:84:cf:19:bd:
                    c0:78:ec:8a:74:ac:4b:5f:e9:e0:f3:f5:e1:d8:b7:
                    6f:01:3a:f3:e9:e0:cc:67:de:ac:06:ab:2f:87:32:
                    04:a8:b5:5e:21:8d:e8:89:09:11:d7:2d:d0:8b:1a:
                    01:a8:31:3f:8d:45:c3:77:21:53:50:ee:f5:fb:d5:
                    1a:a2:f6:f5:07:62:22:e4:77:3d:46:8c:8c:b7:6a:
                    f4:d6:02:db:bb:59:16:08:73:ec:ee:c2:a3:64:2c:
                    19:e8:49:cc:a8:3a:d6:3f:2f:d3:8e:86:06:51:1a:
                    db:a7:36:d3:fc:32:7c:8a:1b:4c:d1:7f:ad:d6:98:
                    94:56:d5:43:b5:9e:87:1c:82:e0:4b:37:e5:c1:c6:
                    26:60:88:e9:fb:5c:d0:e0:fc:a1:36:09:4e:1b:a6:
                    ee:c8:cc:b3:d6:c2:6f:28:57:da:f1:6b:da:39:9b:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:BC:53:77:F3:91:68:C6:26:84:DD:C3:2C:68:03:22:24:4B:04
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e37302e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:73:77:51:a4:d8:86:b8:41:2b:f4:54:b4:a9:9e:c3:c1:
         3a:c3:11:7e:ce:9d:93:0a:b2:77:ce:ca:95:4c:42:41:0f:21:
         31:50:1f:bf:9b:48:7b:f1:29:65:23:66:e7:f0:81:3a:b8:3e:
         63:b7:85:c8:32:80:c0:d0:65:cc:ca:cd:ee:f5:e9:3f:99:d9:
         19:73:14:a7:86:9f:07:7b:47:a4:81:36:0c:09:ef:69:57:a2:
         2f:b6:e0:10:e9:54:8e:e3:55:af:9c:f1:fa:42:35:26:96:d9:
         91:ee:a0:11:c9:74:d7:41:45:fc:b7:58:7a:82:be:67:f2:ef:
         cb:b4:49:a8:9f:45:35:fe:7b:16:8e:36:c3:7a:20:87:62:c1:
         60:de:c1:7b:a1:80:ae:0b:5c:be:b3:29:3f:1e:fa:6f:3a:50:
         95:d5:45:04:3a:23:47:d3:58:e7:de:a7:7b:e8:a9:2f:d2:73:
         32:5c:10:f4:26:a8:cc:28:11:bd:77:c2:b7:d0:1f:fa:d3:92:
         c5:ca:80:43:9c:28:39:e0:a0:26:03:22:32:09:e6:f6:f9:30:
         d8:96:26:fb:10:a2:3f:81:9c:d1:ca:a5:5f:ba:a4:66:e9:3a:
         12:37:8d:08:6e:69:a5:f4:74:d1:c9:6f:18:1b:d0:8e:28:d4:
         df:cb:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:28 2026 by rpki-client